1*13b097dfSaaron /* $OpenBSD: rm.c,v 1.7 1998/11/04 21:52:41 aaron Exp $ */ 2df930be7Sderaadt /* $NetBSD: rm.c,v 1.19 1995/09/07 06:48:50 jtc Exp $ */ 3df930be7Sderaadt 4df930be7Sderaadt /*- 5df930be7Sderaadt * Copyright (c) 1990, 1993, 1994 6df930be7Sderaadt * The Regents of the University of California. All rights reserved. 7df930be7Sderaadt * 8df930be7Sderaadt * Redistribution and use in source and binary forms, with or without 9df930be7Sderaadt * modification, are permitted provided that the following conditions 10df930be7Sderaadt * are met: 11df930be7Sderaadt * 1. Redistributions of source code must retain the above copyright 12df930be7Sderaadt * notice, this list of conditions and the following disclaimer. 13df930be7Sderaadt * 2. Redistributions in binary form must reproduce the above copyright 14df930be7Sderaadt * notice, this list of conditions and the following disclaimer in the 15df930be7Sderaadt * documentation and/or other materials provided with the distribution. 16df930be7Sderaadt * 3. All advertising materials mentioning features or use of this software 17df930be7Sderaadt * must display the following acknowledgement: 18df930be7Sderaadt * This product includes software developed by the University of 19df930be7Sderaadt * California, Berkeley and its contributors. 20df930be7Sderaadt * 4. Neither the name of the University nor the names of its contributors 21df930be7Sderaadt * may be used to endorse or promote products derived from this software 22df930be7Sderaadt * without specific prior written permission. 23df930be7Sderaadt * 24df930be7Sderaadt * THIS SOFTWARE IS PROVIDED BY THE REGENTS AND CONTRIBUTORS ``AS IS'' AND 25df930be7Sderaadt * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE 26df930be7Sderaadt * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE 27df930be7Sderaadt * ARE DISCLAIMED. IN NO EVENT SHALL THE REGENTS OR CONTRIBUTORS BE LIABLE 28df930be7Sderaadt * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL 29df930be7Sderaadt * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS 30df930be7Sderaadt * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) 31df930be7Sderaadt * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT 32df930be7Sderaadt * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY 33df930be7Sderaadt * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF 34df930be7Sderaadt * SUCH DAMAGE. 35df930be7Sderaadt */ 36df930be7Sderaadt 37df930be7Sderaadt #ifndef lint 38df930be7Sderaadt static char copyright[] = 39df930be7Sderaadt "@(#) Copyright (c) 1990, 1993, 1994\n\ 40df930be7Sderaadt The Regents of the University of California. All rights reserved.\n"; 41df930be7Sderaadt #endif /* not lint */ 42df930be7Sderaadt 43df930be7Sderaadt #ifndef lint 44df930be7Sderaadt #if 0 45df930be7Sderaadt static char sccsid[] = "@(#)rm.c 8.8 (Berkeley) 4/27/95"; 46df930be7Sderaadt #else 47*13b097dfSaaron static char rcsid[] = "$OpenBSD: rm.c,v 1.7 1998/11/04 21:52:41 aaron Exp $"; 48df930be7Sderaadt #endif 49df930be7Sderaadt #endif /* not lint */ 50df930be7Sderaadt 51df930be7Sderaadt #include <sys/types.h> 52df930be7Sderaadt #include <sys/stat.h> 53*13b097dfSaaron #include <sys/param.h> 54*13b097dfSaaron #include <sys/mount.h> 55df930be7Sderaadt 56df930be7Sderaadt #include <locale.h> 57df930be7Sderaadt #include <err.h> 58df930be7Sderaadt #include <errno.h> 59df930be7Sderaadt #include <fcntl.h> 60df930be7Sderaadt #include <fts.h> 61df930be7Sderaadt #include <stdio.h> 62df930be7Sderaadt #include <stdlib.h> 63df930be7Sderaadt #include <string.h> 64df930be7Sderaadt #include <unistd.h> 65764064c4Smickey #include <pwd.h> 66764064c4Smickey #include <grp.h> 67df930be7Sderaadt 68df930be7Sderaadt int dflag, eval, fflag, iflag, Pflag, Wflag, stdin_ok; 69df930be7Sderaadt 70df930be7Sderaadt int check __P((char *, char *, struct stat *)); 71df930be7Sderaadt void checkdot __P((char **)); 72df930be7Sderaadt void rm_file __P((char **)); 73df930be7Sderaadt void rm_overwrite __P((char *, struct stat *)); 74df930be7Sderaadt void rm_tree __P((char **)); 75df930be7Sderaadt void usage __P((void)); 76df930be7Sderaadt 77df930be7Sderaadt /* 78df930be7Sderaadt * rm -- 79df930be7Sderaadt * This rm is different from historic rm's, but is expected to match 80df930be7Sderaadt * POSIX 1003.2 behavior. The most visible difference is that -f 81df930be7Sderaadt * has two specific effects now, ignore non-existent files and force 82df930be7Sderaadt * file removal. 83df930be7Sderaadt */ 84df930be7Sderaadt int 85df930be7Sderaadt main(argc, argv) 86df930be7Sderaadt int argc; 87df930be7Sderaadt char *argv[]; 88df930be7Sderaadt { 89df930be7Sderaadt int ch, rflag; 90df930be7Sderaadt 91df930be7Sderaadt setlocale(LC_ALL, ""); 92df930be7Sderaadt 93df930be7Sderaadt Pflag = rflag = 0; 94df930be7Sderaadt while ((ch = getopt(argc, argv, "dfiPRrW")) != -1) 95df930be7Sderaadt switch(ch) { 96df930be7Sderaadt case 'd': 97df930be7Sderaadt dflag = 1; 98df930be7Sderaadt break; 99df930be7Sderaadt case 'f': 100df930be7Sderaadt fflag = 1; 101df930be7Sderaadt iflag = 0; 102df930be7Sderaadt break; 103df930be7Sderaadt case 'i': 104df930be7Sderaadt fflag = 0; 105df930be7Sderaadt iflag = 1; 106df930be7Sderaadt break; 107df930be7Sderaadt case 'P': 108df930be7Sderaadt Pflag = 1; 109df930be7Sderaadt break; 110df930be7Sderaadt case 'R': 111df930be7Sderaadt case 'r': /* Compatibility. */ 112df930be7Sderaadt rflag = 1; 113df930be7Sderaadt break; 114df930be7Sderaadt case 'W': 115df930be7Sderaadt Wflag = 1; 116df930be7Sderaadt break; 117df930be7Sderaadt default: 118df930be7Sderaadt usage(); 119df930be7Sderaadt } 120df930be7Sderaadt argc -= optind; 121df930be7Sderaadt argv += optind; 122df930be7Sderaadt 123df930be7Sderaadt if (argc < 1) 124df930be7Sderaadt usage(); 125df930be7Sderaadt 126df930be7Sderaadt checkdot(argv); 127df930be7Sderaadt 128df930be7Sderaadt if (*argv) { 129df930be7Sderaadt stdin_ok = isatty(STDIN_FILENO); 130df930be7Sderaadt 131df930be7Sderaadt if (rflag) 132df930be7Sderaadt rm_tree(argv); 133df930be7Sderaadt else 134df930be7Sderaadt rm_file(argv); 135df930be7Sderaadt } 136df930be7Sderaadt 137df930be7Sderaadt exit (eval); 138df930be7Sderaadt } 139df930be7Sderaadt 140df930be7Sderaadt void 141df930be7Sderaadt rm_tree(argv) 142df930be7Sderaadt char **argv; 143df930be7Sderaadt { 144df930be7Sderaadt FTS *fts; 145df930be7Sderaadt FTSENT *p; 146df930be7Sderaadt int needstat; 147df930be7Sderaadt int flags; 148df930be7Sderaadt 149df930be7Sderaadt /* 150df930be7Sderaadt * Remove a file hierarchy. If forcing removal (-f), or interactive 151df930be7Sderaadt * (-i) or can't ask anyway (stdin_ok), don't stat the file. 152df930be7Sderaadt */ 153df930be7Sderaadt needstat = !fflag && !iflag && stdin_ok; 154df930be7Sderaadt 155df930be7Sderaadt /* 156df930be7Sderaadt * If the -i option is specified, the user can skip on the pre-order 157df930be7Sderaadt * visit. The fts_number field flags skipped directories. 158df930be7Sderaadt */ 159df930be7Sderaadt #define SKIPPED 1 160df930be7Sderaadt 161df930be7Sderaadt flags = FTS_PHYSICAL; 162df930be7Sderaadt if (!needstat) 163df930be7Sderaadt flags |= FTS_NOSTAT; 164df930be7Sderaadt if (Wflag) 165df930be7Sderaadt flags |= FTS_WHITEOUT; 166c077d5b0Skstailey if (!(fts = fts_open(argv, flags, NULL))) 167df930be7Sderaadt err(1, NULL); 168df930be7Sderaadt while ((p = fts_read(fts)) != NULL) { 169df930be7Sderaadt switch (p->fts_info) { 170df930be7Sderaadt case FTS_DNR: 171df930be7Sderaadt if (!fflag || p->fts_errno != ENOENT) { 172df930be7Sderaadt warnx("%s: %s", 173df930be7Sderaadt p->fts_path, strerror(p->fts_errno)); 174df930be7Sderaadt eval = 1; 175df930be7Sderaadt } 176df930be7Sderaadt continue; 177df930be7Sderaadt case FTS_ERR: 178df930be7Sderaadt errx(1, "%s: %s", p->fts_path, strerror(p->fts_errno)); 179df930be7Sderaadt case FTS_NS: 180df930be7Sderaadt /* 181df930be7Sderaadt * FTS_NS: assume that if can't stat the file, it 182df930be7Sderaadt * can't be unlinked. 183df930be7Sderaadt */ 184df930be7Sderaadt if (!needstat) 185df930be7Sderaadt break; 186df930be7Sderaadt if (!fflag || p->fts_errno != ENOENT) { 187df930be7Sderaadt warnx("%s: %s", 188df930be7Sderaadt p->fts_path, strerror(p->fts_errno)); 189df930be7Sderaadt eval = 1; 190df930be7Sderaadt } 191df930be7Sderaadt continue; 192df930be7Sderaadt case FTS_D: 193df930be7Sderaadt /* Pre-order: give user chance to skip. */ 194df930be7Sderaadt if (!fflag && !check(p->fts_path, p->fts_accpath, 195df930be7Sderaadt p->fts_statp)) { 196df930be7Sderaadt (void)fts_set(fts, p, FTS_SKIP); 197df930be7Sderaadt p->fts_number = SKIPPED; 198df930be7Sderaadt } 199df930be7Sderaadt continue; 200df930be7Sderaadt case FTS_DP: 201df930be7Sderaadt /* Post-order: see if user skipped. */ 202df930be7Sderaadt if (p->fts_number == SKIPPED) 203df930be7Sderaadt continue; 204df930be7Sderaadt break; 205df930be7Sderaadt default: 206df930be7Sderaadt if (!fflag && 207df930be7Sderaadt !check(p->fts_path, p->fts_accpath, p->fts_statp)) 208df930be7Sderaadt continue; 209df930be7Sderaadt } 210df930be7Sderaadt 211df930be7Sderaadt /* 212df930be7Sderaadt * If we can't read or search the directory, may still be 213df930be7Sderaadt * able to remove it. Don't print out the un{read,search}able 214df930be7Sderaadt * message unless the remove fails. 215df930be7Sderaadt */ 216df930be7Sderaadt switch (p->fts_info) { 217df930be7Sderaadt case FTS_DP: 218df930be7Sderaadt case FTS_DNR: 219764064c4Smickey if (!rmdir(p->fts_accpath) || 220764064c4Smickey (fflag && errno == ENOENT)) 221df930be7Sderaadt continue; 222df930be7Sderaadt break; 223df930be7Sderaadt 224df930be7Sderaadt case FTS_W: 225df930be7Sderaadt if (!undelete(p->fts_accpath) || 226764064c4Smickey (fflag && errno == ENOENT)) 227df930be7Sderaadt continue; 228df930be7Sderaadt break; 229df930be7Sderaadt 230df930be7Sderaadt default: 231df930be7Sderaadt if (Pflag) 232df930be7Sderaadt rm_overwrite(p->fts_accpath, NULL); 233764064c4Smickey if (!unlink(p->fts_accpath) || 234764064c4Smickey (fflag && errno == ENOENT)) 235df930be7Sderaadt continue; 236df930be7Sderaadt } 237df930be7Sderaadt warn("%s", p->fts_path); 238df930be7Sderaadt eval = 1; 239df930be7Sderaadt } 240df930be7Sderaadt if (errno) 241df930be7Sderaadt err(1, "fts_read"); 242df930be7Sderaadt } 243df930be7Sderaadt 244df930be7Sderaadt void 245df930be7Sderaadt rm_file(argv) 246df930be7Sderaadt char **argv; 247df930be7Sderaadt { 248df930be7Sderaadt struct stat sb; 249df930be7Sderaadt int rval; 250df930be7Sderaadt char *f; 251df930be7Sderaadt 252df930be7Sderaadt /* 253df930be7Sderaadt * Remove a file. POSIX 1003.2 states that, by default, attempting 254df930be7Sderaadt * to remove a directory is an error, so must always stat the file. 255df930be7Sderaadt */ 256df930be7Sderaadt while ((f = *argv++) != NULL) { 257df930be7Sderaadt /* Assume if can't stat the file, can't unlink it. */ 258df930be7Sderaadt if (lstat(f, &sb)) { 259df930be7Sderaadt if (Wflag) { 260df930be7Sderaadt sb.st_mode = S_IFWHT|S_IWUSR|S_IRUSR; 261df930be7Sderaadt } else { 262df930be7Sderaadt if (!fflag || errno != ENOENT) { 263df930be7Sderaadt warn("%s", f); 264df930be7Sderaadt eval = 1; 265df930be7Sderaadt } 266df930be7Sderaadt continue; 267df930be7Sderaadt } 268df930be7Sderaadt } else if (Wflag) { 269df930be7Sderaadt warnx("%s: %s", f, strerror(EEXIST)); 270df930be7Sderaadt eval = 1; 271df930be7Sderaadt continue; 272df930be7Sderaadt } 273df930be7Sderaadt 274df930be7Sderaadt if (S_ISDIR(sb.st_mode) && !dflag) { 275df930be7Sderaadt warnx("%s: is a directory", f); 276df930be7Sderaadt eval = 1; 277df930be7Sderaadt continue; 278df930be7Sderaadt } 279df930be7Sderaadt if (!fflag && !S_ISWHT(sb.st_mode) && !check(f, f, &sb)) 280df930be7Sderaadt continue; 281df930be7Sderaadt if (S_ISWHT(sb.st_mode)) 282df930be7Sderaadt rval = undelete(f); 283df930be7Sderaadt else if (S_ISDIR(sb.st_mode)) 284df930be7Sderaadt rval = rmdir(f); 285df930be7Sderaadt else { 286df930be7Sderaadt if (Pflag) 287df930be7Sderaadt rm_overwrite(f, &sb); 288df930be7Sderaadt rval = unlink(f); 289df930be7Sderaadt } 290df930be7Sderaadt if (rval && (!fflag || errno != ENOENT)) { 291df930be7Sderaadt warn("%s", f); 292df930be7Sderaadt eval = 1; 293df930be7Sderaadt } 294df930be7Sderaadt } 295df930be7Sderaadt } 296df930be7Sderaadt 297df930be7Sderaadt /* 298df930be7Sderaadt * rm_overwrite -- 299df930be7Sderaadt * Overwrite the file 3 times with varying bit patterns. 300df930be7Sderaadt * 301df930be7Sderaadt * XXX 302df930be7Sderaadt * This is a cheap way to *really* delete files. Note that only regular 303df930be7Sderaadt * files are deleted, directories (and therefore names) will remain. 304df930be7Sderaadt * Also, this assumes a fixed-block file system (like FFS, or a V7 or a 305df930be7Sderaadt * System V file system). In a logging file system, you'll have to have 306df930be7Sderaadt * kernel support. 307df930be7Sderaadt */ 308df930be7Sderaadt void 309df930be7Sderaadt rm_overwrite(file, sbp) 310df930be7Sderaadt char *file; 311df930be7Sderaadt struct stat *sbp; 312df930be7Sderaadt { 313df930be7Sderaadt struct stat sb; 314*13b097dfSaaron struct statfs fsb; 315df930be7Sderaadt off_t len; 316*13b097dfSaaron int bsize, fd, wlen; 317*13b097dfSaaron char *buf; 318df930be7Sderaadt 319df930be7Sderaadt fd = -1; 320df930be7Sderaadt if (sbp == NULL) { 321df930be7Sderaadt if (lstat(file, &sb)) 322df930be7Sderaadt goto err; 323df930be7Sderaadt sbp = &sb; 324df930be7Sderaadt } 325df930be7Sderaadt if (!S_ISREG(sbp->st_mode)) 326df930be7Sderaadt return; 327df930be7Sderaadt if ((fd = open(file, O_WRONLY, 0)) == -1) 328df930be7Sderaadt goto err; 329*13b097dfSaaron if (fstatfs(fd, &fsb) == -1) 330*13b097dfSaaron goto err; 331*13b097dfSaaron bsize = MAX(fsb.f_iosize, 1024); 332*13b097dfSaaron if ((buf = malloc(bsize)) == NULL) 333*13b097dfSaaron err(1, "malloc"); 334df930be7Sderaadt 335df930be7Sderaadt #define PASS(byte) { \ 336*13b097dfSaaron memset(buf, byte, bsize); \ 337df930be7Sderaadt for (len = sbp->st_size; len > 0; len -= wlen) { \ 338*13b097dfSaaron wlen = len < bsize ? len : bsize; \ 339df930be7Sderaadt if (write(fd, buf, wlen) != wlen) \ 340df930be7Sderaadt goto err; \ 341df930be7Sderaadt } \ 342df930be7Sderaadt } 343df930be7Sderaadt PASS(0xff); 344df930be7Sderaadt if (fsync(fd) || lseek(fd, (off_t)0, SEEK_SET)) 345df930be7Sderaadt goto err; 346df930be7Sderaadt PASS(0x00); 347df930be7Sderaadt if (fsync(fd) || lseek(fd, (off_t)0, SEEK_SET)) 348df930be7Sderaadt goto err; 349df930be7Sderaadt PASS(0xff); 350*13b097dfSaaron if (!fsync(fd) && !close(fd)) { 351*13b097dfSaaron free(buf); 352df930be7Sderaadt return; 353*13b097dfSaaron } 354df930be7Sderaadt 355df930be7Sderaadt err: eval = 1; 356*13b097dfSaaron free(buf); 357df930be7Sderaadt warn("%s", file); 358df930be7Sderaadt } 359df930be7Sderaadt 360df930be7Sderaadt 361df930be7Sderaadt int 362df930be7Sderaadt check(path, name, sp) 363df930be7Sderaadt char *path, *name; 364df930be7Sderaadt struct stat *sp; 365df930be7Sderaadt { 366df930be7Sderaadt int ch, first; 367df930be7Sderaadt char modep[15]; 368df930be7Sderaadt 369df930be7Sderaadt /* Check -i first. */ 370df930be7Sderaadt if (iflag) 371df930be7Sderaadt (void)fprintf(stderr, "remove %s? ", path); 372df930be7Sderaadt else { 373df930be7Sderaadt /* 374df930be7Sderaadt * If it's not a symbolic link and it's unwritable and we're 375df930be7Sderaadt * talking to a terminal, ask. Symbolic links are excluded 376df930be7Sderaadt * because their permissions are meaningless. Check stdin_ok 377df930be7Sderaadt * first because we may not have stat'ed the file. 378df930be7Sderaadt */ 379df930be7Sderaadt if (!stdin_ok || S_ISLNK(sp->st_mode) || !access(name, W_OK)) 380df930be7Sderaadt return (1); 381df930be7Sderaadt strmode(sp->st_mode, modep); 382df930be7Sderaadt (void)fprintf(stderr, "override %s%s%s/%s for %s? ", 383df930be7Sderaadt modep + 1, modep[9] == ' ' ? "" : " ", 384df930be7Sderaadt user_from_uid(sp->st_uid, 0), 385df930be7Sderaadt group_from_gid(sp->st_gid, 0), path); 386df930be7Sderaadt } 387df930be7Sderaadt (void)fflush(stderr); 388df930be7Sderaadt 389df930be7Sderaadt first = ch = getchar(); 390df930be7Sderaadt while (ch != '\n' && ch != EOF) 391df930be7Sderaadt ch = getchar(); 392df930be7Sderaadt return (first == 'y' || first == 'Y'); 393df930be7Sderaadt } 394df930be7Sderaadt 395df930be7Sderaadt /* 396df930be7Sderaadt * POSIX.2 requires that if "." or ".." are specified as the basename 397df930be7Sderaadt * portion of an operand, a diagnostic message be written to standard 398df930be7Sderaadt * error and nothing more be done with such operands. 399df930be7Sderaadt * 400df930be7Sderaadt * Since POSIX.2 defines basename as the final portion of a path after 401df930be7Sderaadt * trailing slashes have been removed, we'll remove them here. 402df930be7Sderaadt */ 403764064c4Smickey #define ISDOT(a) ((a)[0] == '.' && (!(a)[1] || ((a)[1] == '.' && !(a)[2]))) 404df930be7Sderaadt void 405df930be7Sderaadt checkdot(argv) 406df930be7Sderaadt char **argv; 407df930be7Sderaadt { 408df930be7Sderaadt char *p, **save, **t; 409df930be7Sderaadt int complained; 410df930be7Sderaadt 411df930be7Sderaadt complained = 0; 412df930be7Sderaadt for (t = argv; *t;) { 413df930be7Sderaadt /* strip trailing slashes */ 414df930be7Sderaadt p = strrchr (*t, '\0'); 415df930be7Sderaadt while (--p > *t && *p == '/') 416df930be7Sderaadt *p = '\0'; 417df930be7Sderaadt 418df930be7Sderaadt /* extract basename */ 419df930be7Sderaadt if ((p = strrchr(*t, '/')) != NULL) 420df930be7Sderaadt ++p; 421df930be7Sderaadt else 422df930be7Sderaadt p = *t; 423df930be7Sderaadt 424df930be7Sderaadt if (ISDOT(p)) { 425df930be7Sderaadt if (!complained++) 426df930be7Sderaadt warnx("\".\" and \"..\" may not be removed"); 427df930be7Sderaadt eval = 1; 428df930be7Sderaadt for (save = t; (t[0] = t[1]) != NULL; ++t) 429df930be7Sderaadt continue; 430df930be7Sderaadt t = save; 431df930be7Sderaadt } else 432df930be7Sderaadt ++t; 433df930be7Sderaadt } 434df930be7Sderaadt } 435df930be7Sderaadt 436df930be7Sderaadt void 437df930be7Sderaadt usage() 438df930be7Sderaadt { 439df930be7Sderaadt 440df930be7Sderaadt (void)fprintf(stderr, "usage: rm [-dfiPRrW] file ...\n"); 441df930be7Sderaadt exit(1); 442df930be7Sderaadt } 443